Privacy Policy

Privacy Policy

Last updated: April 2026

Online Smarty LTD ("we", "us") operates the UMA Water store. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable privacy laws.

1. Data Controller

The data controller is Online Smarty LTD, reachable at hello@umawater.com.

2. Data We Collect

  • Order data: name, delivery address, email, phone number, payment method (we do not store card details — payments are processed by Shopify Payments / PayPal)
  • Account data: email and password if you create an account
  • Marketing data: email address if you subscribe to our newsletter
  • Usage data: IP address, browser type, pages visited, via cookies (see our Cookie Policy)

3. Why We Use Your Data

  • To fulfil your order — legal basis: performance of a contract
  • To send order confirmations and shipping updates — legal basis: contract
  • To send marketing emails (only if you opted in) — legal basis: consent
  • To improve our website via analytics — legal basis: legitimate interest
  • To comply with legal obligations (tax records, etc.) — legal basis: legal obligation

4. Data Sharing

We share your data only with service providers necessary to fulfil your order: our fulfilment partner (GloballyFulfill), shipping carriers, and payment processors (Shopify, PayPal). We do not sell your personal data to third parties.

5. Data Retention

Order data is retained for 7 years to comply with tax and accounting obligations. Marketing data is retained until you unsubscribe. You may request deletion of non-mandatory data at any time.

6. Your Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten") where no legal obligation requires us to retain it
  • Restrict or object to certain types of processing
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time for consent-based processing (e.g. marketing emails)

To exercise any of these rights, email hello@umawater.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

7. Security

We use industry-standard measures to protect your data, including SSL encryption on all pages of this website. Payment information is handled exclusively by PCI-compliant processors.

8. Cookies

We use cookies to improve your experience. See our Cookie Policy for full details.

9. Contact

For any privacy-related questions: hello@umawater.com